AWS Security Architect - Threat Modeling

System One, Inc.; Columbia (SC); On-site; USD 140,000 - 190,000; Full time

Job summary

System One, Inc. is seeking an AWS Security Architect to define security requirements for AWS services, IaC, containers, APIs, data, and AI platforms.

You will craft reusable security patterns and automate policy controls using Terraform Sentinel. You should bring deep AWS security experience across IAM, networking, storage, databases, serverless, and CI/CD, plus hands-on threat modeling with STRIDE and attack trees.

Qualifications

• Deep experience securing AWS environments across IAM, networking, storage, databases, serverless, containers, messaging, and CI/CD services.
• Strong background in information security architecture, cloud security, and Infrastructure as Code security.
• Hands-on threat modeling using STRIDE, attack trees, data flow analysis, and trust boundary analysis.
• Familiar with policy-as-code tools such as Terraform Sentinel.

Responsibilities

• Set security requirements for AWS services, Infrastructure as Code, containers, APIs, data, and AI platforms.
• Develop reusable security patterns and automate policy controls using Terraform Sentinel.

Skills

AWS security

IAM

Networking

Storage

Databases

Serverless

Containers

Messaging

CI/CD

Threat modeling (STRIDE)

Attack trees

Data flow analysis

Trust boundary analysis

Policy as code (Terraform Sentinel)

Tools

Terraform Sentinel

Job description

Requirements

• No C2C with 3rd parties - W2 candidates only.
• Must be able to work on site 5 days a week - no remote work.

Job title

AWS Security Architect

Responsibilities

• Set security requirements for AWS services, Infrastructure as Code, containers, APIs, data, and AI platforms.
• Develop reusable security patterns and automate policy controls using tools such as Terraform Sentinel.

Qualifications

• Deep experience securing AWS environments, including IAM, networking, storage, databases, serverless, containers, messaging, and CI/CD services
• Strong background in information security architecture, application security, cloud security, and Infrastructure as Code security
• Hands on threat modeling experience using STRIDE, attack trees, data flow analysis, and trust boundary analysis
• Knowledge of CI/CD and DevSecOps security controls, including policy as code tools such as Terraform Sentinel
• Experience with data security, encryption, key management, access controls, API security, and identity and access management
• Familiarity with security standards and frameworks such as NIST, OWASP, CIS Benchmarks, FedRAMP, ISO, and SOX
• Ability to turn security findings into clear, practical controls and guidance for technical teams

Job reference

Ref: #404-IT Pittsburgh